Oracle Database Server Unified Audit Vulnerability Allowing Unauthorized Data Modification

A vulnerability exists in the Unified Audit component of Oracle Database Server, affecting versions 19.3 through 19.27, 21.3 through 21.18, and 23.4 through 23.8. This easily exploitable vulnerability allows a high-privileged attacker with Create User privileges and network access via Oracle Net to compromise Unified Audit. Exploitation requires human interaction from a third party. Successful attacks could lead to unauthorized updates, inserts, or deletions of certain Unified Audit data.

Impact

Exploitation of this vulnerability could result in unauthorized modifications to Unified Audit data.